[ 39.047258][ T26] audit: type=1800 audit(1570841411.912:27): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.094660][ T26] audit: type=1800 audit(1570841411.912:28): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.970130][ T26] audit: type=1800 audit(1570841412.882:29): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 39.992115][ T26] audit: type=1800 audit(1570841412.892:30): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2019/10/12 00:50:20 fuzzer started 2019/10/12 00:50:22 dialing manager at 10.128.0.26:36591 2019/10/12 00:50:22 syscalls: 2523 2019/10/12 00:50:22 code coverage: enabled 2019/10/12 00:50:22 comparison tracing: enabled 2019/10/12 00:50:22 extra coverage: extra coverage is not supported by the kernel 2019/10/12 00:50:22 setuid sandbox: enabled 2019/10/12 00:50:22 namespace sandbox: enabled 2019/10/12 00:50:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/12 00:50:22 fault injection: enabled 2019/10/12 00:50:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/12 00:50:22 net packet injection: enabled 2019/10/12 00:50:22 net device setup: enabled 2019/10/12 00:50:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 00:51:30 executing program 0: 00:51:30 executing program 1: syzkaller login: [ 117.699607][ T7783] IPVS: ftp: loaded support on port[0] = 21 [ 117.848633][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 117.864460][ T7785] IPVS: ftp: loaded support on port[0] = 21 [ 117.897216][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.905475][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.914548][ T7783] device bridge_slave_0 entered promiscuous mode [ 117.925185][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.933656][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.941395][ T7783] device bridge_slave_1 entered promiscuous mode 00:51:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 117.984296][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.005973][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.080450][ T7783] team0: Port device team_slave_0 added [ 118.088835][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 118.100144][ T7783] team0: Port device team_slave_1 added 00:51:31 executing program 3: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffb}]}) nanosleep(&(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0) [ 118.194950][ T7783] device hsr_slave_0 entered promiscuous mode [ 118.242495][ T7783] device hsr_slave_1 entered promiscuous mode [ 118.290745][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.297973][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.305783][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.312886][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.358470][ T7789] IPVS: ftp: loaded support on port[0] = 21 [ 118.380553][ T7793] IPVS: ftp: loaded support on port[0] = 21 00:51:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") getitimer(0x0, &(0x7f0000000100)) [ 118.404113][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.411257][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.434506][ T7785] device bridge_slave_0 entered promiscuous mode [ 118.481518][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.490096][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.514678][ T7785] device bridge_slave_1 entered promiscuous mode [ 118.555922][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.585410][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.618711][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.647051][ T7785] team0: Port device team_slave_0 added [ 118.655951][ T7785] team0: Port device team_slave_1 added 00:51:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utime(0x0, 0x0) [ 118.671682][ T7795] IPVS: ftp: loaded support on port[0] = 21 [ 118.715243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.728311][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.746742][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.755457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 118.772455][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.855029][ T7785] device hsr_slave_0 entered promiscuous mode [ 118.892800][ T7785] device hsr_slave_1 entered promiscuous mode [ 118.962341][ T7785] debugfs: Directory 'hsr0' with parent '/' already present! [ 118.979220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.981618][ T7798] IPVS: ftp: loaded support on port[0] = 21 [ 118.989476][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.000281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.030351][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.039493][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.048580][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.055679][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.063432][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.096065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.131708][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.143162][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.151375][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.160254][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.169103][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.202370][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 119.214808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.225247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.258533][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 119.329112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.337972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.348186][ T7783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.377526][ T7795] chnl_net:caif_netlink_parms(): no params data found [ 119.389095][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.396725][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.404997][ T7789] device bridge_slave_0 entered promiscuous mode [ 119.412614][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.419649][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.427815][ T7789] device bridge_slave_1 entered promiscuous mode [ 119.444064][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.451135][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.460543][ T7793] device bridge_slave_0 entered promiscuous mode [ 119.481197][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.515494][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.524868][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.531927][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.540388][ T7793] device bridge_slave_1 entered promiscuous mode [ 119.575560][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.618410][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.638160][ T7789] team0: Port device team_slave_0 added [ 119.644449][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 119.663331][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.671185][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.683147][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.690183][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.697944][ T7795] device bridge_slave_0 entered promiscuous mode [ 119.706638][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.713701][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.721274][ T7795] device bridge_slave_1 entered promiscuous mode [ 119.728918][ T7789] team0: Port device team_slave_1 added 00:51:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 119.831242][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.845331][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.855403][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.867884][ T7793] team0: Port device team_slave_0 added [ 119.914678][ T7789] device hsr_slave_0 entered promiscuous mode [ 119.954062][ T7789] device hsr_slave_1 entered promiscuous mode [ 119.992518][ T7789] debugfs: Directory 'hsr0' with parent '/' already present! [ 120.005452][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.012917][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.020455][ T7798] device bridge_slave_0 entered promiscuous mode [ 120.029734][ T7795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:51:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 120.039915][ T7793] team0: Port device team_slave_1 added [ 120.054124][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.061999][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.069730][ T7798] device bridge_slave_1 entered promiscuous mode [ 120.077929][ T7795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.127868][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.143836][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.158988][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.166202][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.174465][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.182984][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.191198][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.198280][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.206069][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.254869][ T7793] device hsr_slave_0 entered promiscuous mode [ 120.322871][ T7793] device hsr_slave_1 entered promiscuous mode [ 120.362403][ T7793] debugfs: Directory 'hsr0' with parent '/' already present! 00:51:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 120.390840][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.407142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.429026][ T7795] team0: Port device team_slave_0 added 00:51:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 120.437740][ T7795] team0: Port device team_slave_1 added [ 120.458033][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.472030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.481629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.490498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.499291][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.514201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.522886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.531144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.548010][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.625465][ T7795] device hsr_slave_0 entered promiscuous mode [ 120.672735][ T7795] device hsr_slave_1 entered promiscuous mode [ 120.712369][ T7795] debugfs: Directory 'hsr0' with parent '/' already present! [ 120.720235][ T7785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.731604][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.739375][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.747561][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.765486][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 00:51:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 120.786556][ T7798] team0: Port device team_slave_0 added [ 120.827802][ T7798] team0: Port device team_slave_1 added [ 120.841846][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.851317][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.859436][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.869327][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 00:51:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 120.896387][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.909415][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.918747][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.925849][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.944605][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.995040][ T7798] device hsr_slave_0 entered promiscuous mode [ 121.032606][ T7798] device hsr_slave_1 entered promiscuous mode 00:51:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 121.072390][ T7798] debugfs: Directory 'hsr0' with parent '/' already present! [ 121.108092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.122104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.138965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.146090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.154266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.163086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.171498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.181054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.189466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.198162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.206493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.214863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.223082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.231253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.239790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.253184][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:51:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) getdents(r0, &(0x7f0000001e40)=""/4096, 0x1000) [ 121.308832][ T7795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.355819][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.380415][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.398492][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.433286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.448998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.475211][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.488016][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.498682][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.548655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.558896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.567412][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.574512][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.582133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.591345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.599998][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.607100][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.615198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.623869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.632103][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.639189][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.648761][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.669880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.678052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.704556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.720346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.728899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.735995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.744604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.753278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.767232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.768828][ T7857] FAT-fs (loop2): bogus number of reserved sectors [ 121.777365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.790839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.799505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.805194][ T7857] FAT-fs (loop2): Can't find a valid FAT filesystem [ 121.808352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.830435][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.843744][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.854875][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.864662][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.872303][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.879862][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.888759][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.907482][ T7793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.919211][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.946981][ T7795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.958760][ T7795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.980466][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.991000][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.999563][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.008137][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.016683][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.025119][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.033317][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.041460][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.049725][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.059217][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.067723][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.075919][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.084541][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.093103][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.100123][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.107681][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.116433][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.124789][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.131815][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.139902][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.149186][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.160062][ T7856] FAT-fs (loop2): bogus number of reserved sectors [ 122.163498][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.167097][ T7856] FAT-fs (loop2): Can't find a valid FAT filesystem [ 122.175537][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.188709][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.212057][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.229035][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.238216][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.248830][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.261740][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.270931][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.279253][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.287561][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.296069][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.305416][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:51:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000040000000000000000000000000000000000000000000000000db8477946a4740cb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a08308a0237"], 0xb8}, 0x1, 0xfffff000}, 0x0) [ 122.346105][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.359561][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.379492][ T7868] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.399463][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.610424][ T26] audit: type=1326 audit(1570841495.522:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000 00:51:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000100000000"], 0xa0}}, 0x0) 00:51:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:36 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x7}, {0x1, 0x400}, {0x3, 0x6}, {0xd, 0x1}]}, @const={0xf}, @enum={0x6, 0x6, 0x0, 0x6, 0x4, [{0xb, 0x6}, {0x8, 0x2}, {0xd, 0x6}, {0xd, 0x4}, {0x0, 0x10001}, {0x6, 0x422f70ee}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x486a5830490ba6da]}}, &(0x7f0000000380)=""/45, 0x92, 0x2d}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe80, 0x4000, &(0x7f0000000200)="a6f3baff4858cd7574a73bfe4c4e", 0x0, 0x4000}, 0x28) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00'}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)="8d3eda", 0x3}], 0x1, &(0x7f0000000400), 0x0, 0x20000001}, 0x774468b019806ddf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x20008d}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) 00:51:36 executing program 2: open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 00:51:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}}, 0x0) 00:51:36 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x80) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2315212c0f0df81f47084421256b3a3d2c3c75ca8df994764256383746aac819ff3865404e274d809d060bb1823c0e12db80ecf8ac5adcb992348cdea4949eda84a96775c72343de482d8bfc9a62bab74cc21c18e2afc2374978f2fd69872d3588874f17e4da1f824e95c47c825a19d166c919517c5e6b"], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0x1999c) [ 123.407567][ T26] audit: type=1326 audit(1570841496.322:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000 00:51:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x8, 0x0, 0x80, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x28}}, 0x0) 00:51:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @null, @default, @null, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 123.645310][ T7921] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:51:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 123.709115][ T7921] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave 00:51:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 123.784587][ T7921] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) 00:51:36 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) pwrite64(r0, &(0x7f0000002040)="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", 0xd7f, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0xffffffffffffff0d}, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000000004, 0x8000000000000011, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 00:51:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000000300)="0b268a927f1f6588b967481241ba786003e5a9f0c618ded89748958beaf4b4834ff922b3f1e0b02bd6a7e7df6a299af17aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba736633a61982f9f049f20ae11f4a574f0916a81ef583e1a647a5f4c21560d0430b10e7583248605872f7e9", 0xff48, 0x11, 0x0, 0xfffffca4) 00:51:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:36 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20000000000001b) fcntl$setstatus(r0, 0x4, 0x2000) open(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x4010001) [ 124.300546][ T7974] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:51:37 executing program 3: socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x20000000000000bd, 0x0, 0x0, 0x0) [ 124.351859][ T7974] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 124.367070][ T7974] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) 00:51:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'encrypted\x00'}, 0x23, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 00:51:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 124.563773][ T7997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 124.572157][ T7997] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave 00:51:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x06\xc3\x00') 00:51:37 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x80) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2315212c0f0df81f47084421256b3a3d2c3c75ca8df994764256383746aac819ff3865404e274d809d060bb1823c0e12db80ecf8ac5adcb992348cdea4949eda84a96775c72343de482d8bfc9a62bab74cc21c18e2afc2374978f2fd69872d3588874f17e4da1f824e95c47c825a19d166c919517c5e6b"], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0x1999c) [ 124.616568][ T7997] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 124.643422][ T7999] encrypted_key: keylen parameter is missing [ 124.696954][ T8005] encrypted_key: keylen parameter is missing 00:51:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x10) 00:51:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) [ 124.743043][ C1] hrtimer: interrupt took 46231 ns [ 124.753705][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 124.856509][ T8020] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 124.889389][ T8020] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave 00:51:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 124.905200][ T8020] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) 00:51:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r0, &(0x7f0000000300)="0b268a927f1f6588b967481241ba786003e5a9f0c618ded89748958beaf4b4834ff922b3f1e0b02bd6a7e7df6a299af17aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba736633a61982f9f049f20ae11f4a574f0916a81ef583e1a647a5f4c21560d0430b10e7583248605872f7e9", 0xff48, 0x11, 0x0, 0xfffffca4) 00:51:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:40 executing program 4: capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x4, 0xffffff01, 0x4}) 00:51:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) 00:51:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/214, 0xd6}], 0x1, 0x0) 00:51:40 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x0, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "e28494b39d751991"}}, 0x200002c8}}, 0x0) 00:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) [ 127.393860][ T8052] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:51:40 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x79423689489c8288) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={r2, @local, @broadcast}, 0xc) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r4, 0x0, 0x80000003) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7, 0x10000) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r8, 0x0, 0x2}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x6cc3, 0x2, 0x6, 0x10000, r8}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r8}, 0x8) getdents64(r5, &(0x7f00000005c0)=""/4096, 0x1000) 00:51:40 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffb}]}) ioperm(0x0, 0x3, 0x77d74016) [ 127.459619][ T8052] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 127.531296][ T8052] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 127.571431][ T26] audit: type=1326 audit(1570841500.482:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000 00:51:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 00:51:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 127.753549][ T8079] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:51:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 127.793711][ T8079] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 127.817906][ T8075] ------------[ cut here ]------------ [ 127.823584][ T8075] WARNING: CPU: 0 PID: 8075 at fs/readdir.c:110 filldir64+0x4f4/0x5f0 [ 127.831734][ T8075] Kernel panic - not syncing: panic_on_warn set ... [ 127.838364][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 127.846192][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.856250][ T8075] Call Trace: [ 127.859367][ T8079] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 127.859560][ T8075] dump_stack+0x1d8/0x2f8 [ 127.872889][ T8075] panic+0x264/0x7a9 [ 127.876785][ T8075] ? __warn+0x105/0x210 [ 127.880938][ T8075] ? filldir64+0x4f4/0x5f0 [ 127.885356][ T8075] __warn+0x20e/0x210 [ 127.889342][ T8075] ? filldir64+0x4f4/0x5f0 [ 127.891722][ T3891] kobject: 'loop5' (000000000005b7de): kobject_uevent_env [ 127.893759][ T8075] report_bug+0x1b6/0x2f0 [ 127.893771][ T8075] ? filldir64+0x4f4/0x5f0 [ 127.893784][ T8075] do_error_trap+0xd7/0x440 [ 127.893797][ T8075] do_invalid_op+0x36/0x40 [ 127.893808][ T8075] ? filldir64+0x4f4/0x5f0 [ 127.893818][ T8075] invalid_op+0x23/0x30 [ 127.893826][ T8075] RIP: 0010:filldir64+0x4f4/0x5f0 [ 127.901017][ T3891] kobject: 'loop5' (000000000005b7de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 127.905292][ T8075] Code: 1e 48 8b 45 90 42 8a 04 20 84 c0 0f 85 cf 00 00 00 48 8b 45 c0 44 29 38 31 c0 eb 81 e8 65 2a b9 ff 0f 0b eb 07 e8 5c 2a b9 ff <0f> 0b 49 83 c6 24 4c 89 f0 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 bd [ 127.905297][ T8075] RSP: 0018:ffff88805b707b90 EFLAGS: 00010283 [ 127.905304][ T8075] RAX: ffffffff81ba0654 RBX: ffff88805b707d30 RCX: 0000000000040000 [ 127.905309][ T8075] RDX: ffffc9000ebc3000 RSI: 000000000000079c RDI: 000000000000079d [ 127.905314][ T8075] RBP: ffff88805b707c10 R08: ffffffff81ba0194 R09: 0000000000000004 [ 127.905319][ T8075] R10: fffffbfff1120afb R11: 0000000000000000 R12: dffffc0000000000 [ 127.905323][ T8075] R13: 0000000000000004 R14: ffff88805b707e88 R15: 000000000000000c [ 127.905340][ T8075] ? filldir64+0x34/0x5f0 [ 127.905346][ T8075] ? filldir64+0x4f4/0x5f0 [ 127.905364][ T8075] ? _raw_spin_unlock+0x2c/0x50 [ 127.928731][ T3891] kobject: 'loop0' (000000009e216e79): kobject_uevent_env [ 127.932192][ T8075] ? iunique+0x1d9/0x200 [ 127.932206][ T8075] ? ksys_getdents64+0x3f0/0x3f0 [ 127.932222][ T8075] __fat_readdir+0x1320/0x1a50 [ 127.932235][ T8075] ? lock_acquire+0x158/0x250 [ 127.932261][ T8075] ? __kasan_check_write+0x14/0x20 [ 127.956944][ T3891] kobject: 'loop0' (000000009e216e79): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 127.961990][ T8075] ? down_read_killable+0x11e/0x410 [ 127.962010][ T8075] fat_readdir+0x46/0x50 [ 128.071699][ T8075] iterate_dir+0x2a4/0x520 [ 128.076136][ T8075] ksys_getdents64+0x1ea/0x3f0 [ 128.080879][ T8075] ? ksys_getdents64+0x3f0/0x3f0 [ 128.085840][ T8075] __x64_sys_getdents64+0x7a/0x90 [ 128.090882][ T8075] do_syscall_64+0xf7/0x1c0 [ 128.095361][ T8075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 128.101226][ T8075] RIP: 0033:0x459a59 [ 128.105141][ T8075] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 128.124729][ T8075] RSP: 002b:00007f6e4ebb9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.133126][ T8075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 128.141085][ T8075] RDX: 0000000000001000 RSI: 00000000200005c0 RDI: 0000000000000008 [ 128.149031][ T8075] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 128.156979][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e4ebba6d4 [ 128.164930][ T8075] R13: 00000000004c0535 R14: 00000000004d2c58 R15: 00000000ffffffff [ 128.174214][ T8075] Kernel Offset: disabled [ 128.178612][ T8075] Rebooting in 86400 seconds..